NFS sharing problem

[vinayan]

Hi ,

I want the nfs share from my 11.31 machine to be accessible to particular hosts which I specify in /etc/dfs/dfstab . I have specified rw access to one system in dfstab which works fine. But the problem is the NFS share is mountable in ro mode from all the systems . I want to disable that ro mounts.

baterp1:/>more /etc/dfs/dfstab
# place share(1M) commands here for automatic execution
# on entering init state 3.
#
# share [-F fstype] [ -o options] [-d ""]
# .e.g,
# share -F nfs -o rw=engineering -d "home dirs" /home
/usr/sbin/share -F nfs -o rw=batsfpm1,root=batsfpm1 -d "" /export
baterp1:/>
baterp1:/>
baterp1:/>share
- /export rw=batsfpm1,root=batsfpm1,ro= ""
baterp1:/>


Rgds
Vinayan

[Michael Steele_2]

Hi

"...I want to disable that ro mounts..."

Question: You are trying to make rw but only get ro?

The last share that you run will over write the previous.

I'm still a little confused. Your NFS works? Some NFS works? No NFS works?

[Horia Chirculescu]

Hello,

Try to edit the line:

/usr/sbin/share -F nfs -o rw=batsfpm1,root=batsfpm1 -d "" /export

to look like:

/usr/sbin/share -F nfs -o rw=batsfpm1 -d "" /export

Best regards,
Horia.

[vinayan]

Hi Steele,

I have defined a host for rw mount in dfstab.
And that is functioning perfect. My problem is this nfs share is accessible to other hosts also but with only ro permission. Those ro permissions to other hosts shouldn't be there

Rgds
Vinayan

[Aneesh Mohan · Accepted solution]

Hi da,

You need to set the security options explicitly while enabling the nfs share to restrict read only to all other nodes .

try this:-
/usr/sbin/share -F nfs -o sec=none,rw=batsfpm1,window=3000 -d "" /export -

Regards,
Aneesh

[Horia Chirculescu]

"Those ro permissions to other hosts shouldn't be there "

This is something else...

From the manual:
"
rw=client[:client] ...

Share the pathname read-mostly if sec= option is not provided. Read-mostly means read-write to those clients specified and read-only for all other systems. If a sec= option is provided, pathname is shared read/write only to the listed clients. No other systems can access pathname."

Aneesh allready gave to you the right answer to your problem.

Best regards,
Horia

[Aneesh Mohan]

Daa,

You can easily do this by using SMH.

a. Press n, Networking and Communications.
b. Press s, Network Services Configuration.
c. Press f, Networked File Systems.
d. Press s, Share/Unshare File System.
e. Press s,
Specify the filesystem details and select Specify Access Options/select Security Access.
g) Select configure / and define the access roles


Regards,
Aneesh